January 1, Knicks Ring Phishing Test Backfires on MSG

Wyatt’s Take

• MSG tried to trick workers with a fake ring offer and got caught red-handed
• Regular folks got yanked into a mandatory class just for clicking on a company email
• Working people are tired of big corporations playing games with their trust

The New York Knicks organization stirred up trouble among its own staff when it used a fake promise of championship rings to run a cybersecurity test.

Workers who clicked the link were not rewarded with jewelry. Instead they were ordered into a required computer safety class.

“Those who did click the link at the bottom of the message did not get to choose any jewelry; instead, they were forced to attend a mandatory cybersecurity class to help satisfy some of [owner James] Dolan’s growing cybersecurity concerns,” The Athletic reported.

The team later admitted the email was a planned drill. MSG said it had been hit by hackers before and wanted to test how easily staff could be tricked.

“The company had previously sent out an email to its corporate team as a simulation of a phishing attack designed to strengthen our security against hackers. MSG was recently hacked and extorted using an employee login and password obtained through a similar phishing attack,” MSG said in a statement.

MSG called the use of championship rings as bait an unfortunate mistake. The company still plans to hand out more than 275 rings and pieces of jewelry worth over $3.7 million to players, coaches, and staff.

“Using the rings as a lure to gain employees’ attention was an unfortunate mistake” and said it would be giving “more than 275 championship rings and jewelry to players, coaches, employees and other members of the Knicks family, worth more than $3.7 million, in recognition of their contributions and celebrating this achievement.”

Players already received their rings during the season-opening game. The 22-carat pieces carry about 800 diamonds each and are valued at $100,000 apiece. Coaches and staff had been told they would get rings later, but many employees believed they would get nothing at all.

The phishing email played on those hopes. “(Employee name), this one is on the house. MSG is issuing a complimentary employee championship ring. The same jeweler, the same craftsmanship, personalized with your name. No cost to you. There are two designs to choose from: Championship Gold and Garden Classic. Reserve the one you want below,” the message read.

Wyatt Matters

Hard-working Americans expect honesty from their employers, not sneaky tests that dangle rewards they will never receive.